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iBSTRACT 


Petri  nets  are  presented  as  a  tecanique  for  representing 
computer  systems  Having  asyncnronous ,  concurrent  operations. 
Tne  structure  of  tne  nets  are  analyzed  as  a  means  of 
demonstrating  tlie  correctness  of  ttoe  modeled  system.  Tne 
execution  of  tne  petrt  net  is  considered  as  a  stocnastic 
process,  allowing  analysis  of  tne  model  as  a  queueing 
networn  system  by  transforming  tne  petri  net  into  its 
stocnastic  equivalent  net.  It  is  sQown  tnat  product  form 
solutions  for  the  state  probabilities  exist  for  the  class  of 
state  macnlne  decomposable  nets  but  not  for  tne  more  general 
class  of  consistent  petri  nets.  Solutions  for  tne 
corresponding  open  systems  are  derived  by  extending  tne 
petri  net  model  to  Include  arbitrary  sources  and  sinxs. 
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I.  INTRODOCTION 

VltB  the  explosion  in  numbers  and  types  of  computer 
harlvare  components  witnessed  in  tne  past  few  years, 
computer  system  design  nas  become  an  extremely  complex  tasx. 
Cox  has  observed  [Ij  : 

"Today's  computers  are  among  tne  most  complex  man  made 
systems  in  existence  today.  The  development  of  such 
systems  represents  a  sienificant  commitment  of  physical 
and  mental  resources.  This  cost  can  only  be  justified  if 
these  computing  devices  serve  their  Intended  purpose  — 
the  efficient  processin^p  of  data  in  response  to  specific 
needs." 

If  we  are  to  make  effective  use  of  these  development 
resources,  it  is  necessary  to  provide  tne  system  designer 
with  tools  which  allow  him  or  her  to  create  and  analyze 
sophisticated  system  designs. 

Several  trends  have  emerged  which  have  accelerated  the 
search  for  new  and  better  design  tools.  The  low  cost  of  LSI 
and  VLSI  hardware  components  coupled  with  technological 
advances  in  digital  communications  has  led  to  the  evolution 
of  a  wide  variety  of  multiprocessor  systems,  distributed 
computing  applications,  and  computer  networks,  is  early  as 
1976,  Anderson  and  Jenson  [2J  identified  27  different 
networking  schemes  being  used  in  prototype  or  actual 
systems.  When  one  considers  the  number  of  communication 
protocols  and  transmission  media  which  have  been  proposed  or 
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Inpletneatedt  tae  number  of  variables  involved  in  tne 

Hardware  desien  process  becomes  truly  awesome. 

Llicewlse,  innovations  in  system  software  nave  given  rise 

to  such  concepts  as  distributed  operating  systems,  on-line 

data  bases,  and  interactive  programming,  to  name  a  few. 

Kobayashi  and  Conneim  [3]  nave  noted  that: 

"with  the  increasing  complexity  and  sophistication  of 
computer  communication  systems,  tpodeling  and  performance 

Evaluation  [emphasis  tnelr'sj  are  becoming  critical 
ssues  in  the  design  and  operation  of  such  systems.  It 
is  apparent  that  for  a  cost-effective  design  we  must  be 
equipped  with  systematic  methods  of  predicting 
quantitative  relations  between  system  resource 
parameters,  system  workloads,  and  measures  of  system 
performance." 

Several  characteristics  of  these  systems  may  be 
identified  which  determine  what  types  of  models  are 
appropriate  for  performance  evaluation.  &  central  concept  is 
that  of  concurrent  or  parallel  processing.  Each  node  in  a 
network,  or  processor  in  a  multiprocessing  system,  is 
capable  of  Independent  computation.  At  the  same  time,  system 
or  global  resources  such  as  memory  and  communication  links 
must  be  Shared  by  the  various  processing  elements.  Tnis 
results  in  enforced  cooperation  between  otherwise 
independent  processes. 

Since  most  resources  in  computing  systems  tend  to  be 
scarce  in  relation  to  the  demands  on  them,  contention  exists 
between  resource  users  which  must  be  arbitrated.  This 
problem  is  complicated  by  the  observation  that  demands  in 
computer  systems  are  not  constant.  For  example,  in  computer 
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communication  networks  empirical  evidence  snows  that  demands 
tend  to  be  bursty  and  sporadic.  As  a  result,  resource 
demands  must  be  viewed  as  stochastic  in  nature  and  system 
models  must  be  capable  of  expressing  tne  probabilistic 
elements  of  tne  modeled  system. 

The  uncertainty  in  resource  demand  results  in  two 
phenomena  which  must  be  considered  in  performance  modellnr. 
Tne  first  is  tne  creation  of  queues  of  users  wnicn  require 
service  but  must  wait  for  resource  availability.  The  second, 
and  interrelated,  phenomenon  is  the  delay  which  users 
experience  while  waltinir  for  resources  and  while  being 
served.  The  field  of  queueing  theory  has  attempted  to  answer 
these  questions  and  others  concerning  tne  probabilistic 
properties  of  systems  in  both  analytic  and  simulation 
models. 

One  purpose  of  performance  prediction  modeling  is  to 
analyze  system  designs  in  terms  of  performance  measures  or 
indices.  Ferrari  [4j  has  identified  three  performance  index 
Classes:  productivity,  responsiveness,  and  utilization.  A 
number  of  specific  measurements  may  be  computed  from  the 
model  to  express  tnese  indices  —  throughput,  waiting  time, 
and  utilization  for  example. 

A  second  purpose  of  performance  modeling  is  to  verify 
proper  system  operation.  It  is  important  to  ensure  that  the 
underlying  system  is  deadlock-free,  or  at  least  to  predict 
tne  circumstances  under  which  deadlock  could  occur.  In 
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addition,  It  may  be  necessary  to  demonstrate  that  the  system 
enforces  syncnronitatlon  or  nutual  exclusion  among  elements 
of  the  system. 

It  is  not  sufficient  for  a  model  to  be  capable  of 
proTiding  ansvers  to  these  questions.  The  model  must  also  be 
amenable  to  ralidation;  that  is,  the  determination  of  how 
accurately  the  predicted  results  conform  to  the  modeled 
system.  This  may  be  particularly  difficult  to  accomplish 
when  the  actual  system  does  not  exist  or  is  otherwise  not 
awallable.  Finally,  It  is  desirable  that  the  model  be  robust 
in  order  that  its  domain  of  validity  extend  over  as  large  a 
range  of  systems  as  possible. 

Performance  models  can  be  divided  Into  two  separate 
types  simulation  and  analytical,  k  simulation  may  tahe 
various  forms;  however,  me  form  most  often  associated  with 
performance  modellne  is  computer  based,  discrete  event 
simulation.  This  model  consists  of  a  program  which  describes 
the  state  of  the  modeled  system  in  terms  of  system  entitles 
and  their  attributes  at  each  point  In  time.  Attributes  are 
varied  a$  a  result  of  the  instantaneous  occurrence  of  events 
in  the  system.  The  model  then  tracxs  the  changes  In 
attributes  over  time  to  determine  the  required  performance 
measures.  Simulations  suffer  from  several  shortcomings.  To 
accurately  model  the  system,  the  programs  must  be  complex 
resulting  in  a  significant  software  engineering  problem;  the 
model  must  be  carefully  designed  and  verified  to  ensure 
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proper  operation.  Because  of  tne  probabilistic  nature  of  tne 
system,  It  Is  necessary  to  operate  the  simulation  for 
numerous  runs  anl  OTer  a  large  span  of  slmuatlon  time  to 
ensure  statistically  meaningful  results.  This  can  lead  to 
significant  computing  costs  for  the  simulation.  Finally,  If 
tne  system  parameters  are  to  be  changed,  or  elements  of  tne 
system  altered,  it  is  necessary  to  cnanee  the  simulation  and 
rerun  it.  Once  again,  the  costs  of  software  modification  and 
model  operation  must  be  met.  This  can  maice  it  difficult  to 
generalize  or  abstract  from  the  simulation. 

An  alternative  to  simulation  modeling  is  analytic 
modeling.  In  this  method  the  system  is  expressed  as  a  set  of 
mathematical  equations.  Determining  the  performance  measures 
for  the  system  amounts  to  flndine  the  appropriate  solutions 
to  the  system  equations.  Unfortunately,  in  many  cases  the 
solutions  are  mathematically  Intractable  or  computationally 
inefficient  anl  require  that  simplifying  assumptions  be  made 
about  the  system.  However,  to  quote  from  lobeyashl  and 
Eonheim  once  again: 

"Even  when  a  decision  is  made  for  simulation,  an 
analytic  solution,  however  crude  it  may  be,  can  serve  as 
a  guideline  in  narrowing  down  a  range  of  system 
configurations  and  parameters  under  which  a  simulation 
runs.  It  also  could  save  a  considerable  amount  of 
modelinr  efforts,  by  detecting  possible  errors 
introduced  in  the  design  and  implementation  phases  of  a 
simulation." 

This  thesis  investigates  an  approach  to  the  analytic 
modeling  of  computer  systems  based  on  using  a 
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graph-tJieoretlc  tecnnlque  —  petrl  nets  —  as  a 
representation  for  system  elements  and  tnelr  Interactions. 
By  analyzing  tfte  structure  of  a  petri  net  model,  it  is 
possible  to  answer  a  number  of  questions  regarding  tne 
operation  of  tne  modeled  system.  We  snow  that  it  Is  possible 
to  model  tne  stocnastic  nature  of  computer  systems  by 
extending  tne  petrl  net  model  to  allow  nondeterminism  in  the 
net  to  be  expressed  in  terms  of  probability  distributions. 
It  is  then  possible  to  consider  a  petri  net  as  an  analog  to 
a  queueing  network  system  and  therefore  it  is  possible  to 
apply  the  known  methods  of  Harkov  analysis  to  the  nets  to 
obtain  analytic  solutions  for  the  system.  The  problem  we 
address  in  this  thesis  is  the  evaluation  of  nondetermlnlstlc 
and  stochastic  petri  nets  using  queueing  theory  techniques. 
The  solutions  which  result  combine  the  structural  properties 
of  petri  nets  with  the  capability  for  performance 
prediction, 

A.  PETRI  NETS  AS  A  PERFORHANCE  MODEL 

Consider  a  simple  computer  system  consisting  of  two 
cooperating,  concurrent  processes  A  and  B  running  on 
separate  hardware.  Process  A  is  a  producer,  and  process  B  is 
a  consumer  of  data.  It  is  desired  that  a  handshake  protocol 
be  Implemented  between  the  two  processes  (see  Figure  1.1). 
How  might  this  be  represented? 


One  possibility  Is  to  list  the  events  which  must  occur 


during  the  nandsnaice  process.  Using  this  event  list,  we 
could  then  determine  what  conditions  must  be  satisfied  for 
each  event  to  occur,  and  what  changes  In  the  system  result 
from  that  occurrence.  This  could  be  graphically  displayed  In 
the  following  manner.  Let  the  events  be  represented  by  a 
bar,  and  tne  conditions  by  circles.  For  each  event,  draw  a 
directed  arc  from  each  circle  (condition)  which  must  hold 
for  the  event  to  occur  to  the  bar  (event).  Next,  draw  a 
directed  arc  from  the  bar  to  each  circle  (condition)  which 
holds  as  a  result  of  the  occurrence  of  the  event.  Finally, 
determine  tne  Initial  state  of  the  system  by  deciding  which 
conditions  Initially  hold,  and  place  a  dot  (token)  in  a 
circle  for  each  holding  of  that  condition.  The  resulting 
graph  is  shown  In  Figure  1.2. 

This  graph  Is  called  the  petri  net  model  of  the 
communication  protocol,  after  C.  A,  Petri  who  first  studied 
them  In  the  1950's  [5].  Note  that  each  event  may  have  one  or 
more  Input  conditions,  and  one  or  more  output  conditions.  In 
the  language  of  petri  nets,  the  events  are  called 
transitions  and  the  conditions  are  called  places .  The  net 
operates  by  moving  tokens  around  the  net  In  accordance  with 
the  firing  rule,  which  states  that  an  event  may  occur  when 
each  Input  place  to  the  event  nas  e  token  .assigned  to  It. 
The  transition  fires  by  removing  a  token  from  each  Input 
place  and  depositing  one  in  each  output  place.  The  state  of 


PROCESS  A 


PROCESS  B 


send  to 

output  buffer  receive 


Flrure  1.2  Petri  net  model  of  a  communication  protocol 


each  place  is  determined  by  the  number  of  toKens  in  it.  The 
system  state,  or  marking,  is  then  represented  by  a  vector 
whose  elements  are  the  state  of  each  place  in  the  net. 

One  feature  of  the  petri  net  model  is  that  the  tokens 
can  represent  either  control  flow  or  data  flow;  the 
difference  purely  lies  in  now  the  net  is  Interpreted  by  the 
designer.  This  nas  led  to  some  difficulty  in  modeling 
data-dependent  events.  Several  attempts  have  been  made  to 
overcome  this  problem  by  extending  the  definition  to  include 
specialized  places  such  as  conditional  places,  which  cause 
transitions  to  fire  in  different  ways  depending  on  whether 
or  not  the  condition  place  bolds  a  token.  In  either  case  tne 
token  content  of  tne  conditional  place  is  not  changed  by  the 
firing,  in  example  of  this  extension  Is  tne  Macro  E-Net  Noe 
and  Nutt  have  proposed  [6].  In  a  silently  different 
extension,  inhibitor  places  were  added  to  the  net  [7J  which 
prevent  firine  of  a  transition  when  the  place  holds  a  token. 

A  second  feature  of  petri  nets  is  that  the  firine  of 
transitions  is  inherently  asynchronous  and  concurrent  —  for 
example  in  Fieure  l.Z  the  <process  data>  events  for  both 
processes  can  fire  Independently  of  each  other.  When 
necessary,  the  operation  of  concurrent  processes  can  be 
coordinated  through  the  use  of  multiple  input  places;  the 
<recelve  nessage>  event  is  an  example  of  this  type  of 
interaction. 
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Tbe  basic  petrl  net*  as  depicted  here*  does  not  attempt 
to  nodel  tne  time  required  for  execution.  Extensions  to  tne 
theory  which  account  for  execution  limes  were  investigated 
by  Ramchandanl  [8J  and  others.  This  technique  allows  for 
analysis  of  tne  time-related  operation  of  tne  net. 

1.  Analysis  of  uetrl  nets 

Petri  nets  may  be  analyzed  In  a  number  of  ways.  Mucn 
of  the  work,  particularly  at  MIT.  has  been  based  on  uslnc 
techniques  from  automata  theory  and  investi^atlnp  the  nets 
as  formal  language  generators  [9,  10J .  Oslng  this  method. 
Hack  has  proven  a  number  of  decidability  questions  about  the 
possible  configurations  (system  states)  of  the  net.  Other 
work  [11,12,13]  has  emphasized  the  eraph  theoretical 
properties  of  the  nets  In  analyzing  their  structure.  This 
methodology  has  led  to  tne  Identification  of  several 
subclasses  of  petrl  nets  based  on  special  structural 
characteristics . 

Simulations  based  on  petrl  net  models  have  been  widely 
used  In  analyzing  hardware  designs  of  concurrent  systems  and 
data  flow  computing.  Typically,  the  system  to  be  modeled  is 
reduced  to  Its  petrl  net  equivalent  which  then  serves  as 
Input  to  tbe  simulator.  Tbe  simulator  then  executes  the 
petrl  net  in  much  the  same  manner  as  a  conventional  discrete 
event  simulation. 
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Petri  nets  nave  been  used  to  inodei  a  large  number  of 
concurrent  software  and  Hardware  systems.  In  hardware 
design*  they  nave  been  used  as  a  basis  for  developing  speed 
Independent  loelc  [14,15]  by  provine  the  conditions  for 
which  circuits  are  free  of  races  when  operating  in 
fundamental  mode.  More  ambitious  applications  have  involved 
the  analysis  of  multiprocessor  systems  such  as  the  CDC  6600 
[16,17]  .  IBM  360/91  [18],  Amdanl  470  ?/6  [17],  and  US  Navy 
SEiFIRB  weapons  system  [19].  Most  of  these  applications  have 
involved  simulation  modeling  due  to  tne  complexity  of  the 
designs,  i  slightly  different  approach  to  hardware  design 
has  been  the  design  by  step-wise  refinement  method.  7alette 
[20]  has  shown  that  single  transitions  could  be  replaced  by 
more  complex  structures  when  certain  conditions  were  met. 
Using  this  method,  each  component  of  the  system  can  be 
separately  analyzed  and  formed  into  an  independent  structure 
he  called  a  well-formed  bloch.  By  substituting  these  blocics 
for  transitions  in  tne  net,  it  is  possible  to  retain  tne 
properties  of  the  original  net.  This  hierarchical  structure 
also  simplifies  the  problem  of  understanding  the  operation 
of  the  net.  Figure  1.3  shows  how  this  might  be  accomplished. 

Petri  net  models  have  been  used  in  the  analysis  of 
software  designs  as  well.  For  example,  they  have  been  used 
to  verify  the  correctness  of  communication  protocols  [21] . 
Operating  system  synchronization  prlmatives  such  as  P  and  7 
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[22]  may  be  modeled  U5ln«  simple  net  structures.  Fieure  1.4 
<?lves  an  example  of  now  mutual  exclusion  could  be 
represented.  The  contents  of  place  S  is  the  semapnore  value 
for  the  protected  resource  (in  this  case  1).  Each  process 
vnich  requires  exclusive  use  of  tne  resource  nas  an  event 
P(S)  which  may  fire  only  if  the  semaphore  Is  non-zero. 
Firing  of  tne  corresponding  F(S)  event  returns  tne  toxen  to 
the  semaphore.  The  significant  advantage  of  using  a  petrl 
net  is  that  mutual  exclusion  can  be  proven  by  showing  that 
only  one  P(S)  event  can  be  fired  until  tne  corresponding 
V(S )  event  occurs . 

Lest  the  reader  get  the  Impression  that  petrl  nets  are 
the  ultimate  modeling  tool,  it  should  be  noted  that  petrl 
nets  nave  limitations  in  tneir  modeling  ability.  Tne  lacX  of 
a  mechanism  for  handling  data  dependent  events  as  described 
earlier  nas  made  it  difficult  to  model  actual  systems  using 
deterministic  nets,  k  second  related  limitation  is  the  use 
of  deterministic  transition  firing  times  In  the  analysis  cf 
timed  nets.  In  our  opinion,  the  restriction  of  petrl  nets  to 
deterministic  modeling  has  been  responsible  for  the  lacx  of 
attention  given  to  them  in  recent  years. 

Our  view  of  petri  nets  emphasises  the  non-determlnistic 
modeling  capabilities  of  tne  nets.  We  consider  the 
transitions  in  the  net  to  be  service  centers  which  operate 
according  to  some  service  time  distribution.  In  this 
approach,  tne  places  can  represent  queues  of  tokens  awaiting 
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service.  By  regarding  nets  In  tnls  manner,  tne  Known  results 
of  queueing  networJ:  tneory  may  be  applied  to  me  analysis 
while  maintaining  the  benefits  of  tne  underlyln^r  structure 
of  tne  nets.  We  feel  tnat  this  will  result  in  a  better 
modeling  tool  for  analyzing  concurrent  systems. 

B.  REVIEW  OF  RELATED  WORK 

The  basis  for  concurrent  system  modeling  has  largely 
been  derived  fron  two  papers  by  Karp  and  Miller  [24,25J . 
These  papers  proposed  several  models  for  concurrent  systems. 
Computation  graphs  are  slmular  to  petri  nets  except  that 
places  were  modeled  as  directed  arcs  between  events  and 
labeled  with  a  four-tuple  defined  as: 

A  —  tne  Initial  number  of  words  in  a  FIFO  queue 
U  —  the  number  of  words  added  to  tne  queue  as  a  result 
of  tne  firing  of  tne  Input  transition 

W  —  the  number  of  words  removed  from  the  queue  as  a 
result  of  the  firing  of  the  output  transition 

T  —  a  threshold  number  of  words  (perhaps  greater  than 
W)  required  for  the  output  transition  to  fire. 

Karp  and  Miller  established  the  requirements  for  several 
Important  concepts  including  ilveness  and  boundedness  wnlcn 
we  discuss  In  greater  detail  later. 

Reiter  [26j  extended  computation  graphs  by  adding  a 
fifth  element  tau  to  the  directed  arc  labeling  which 
represented  the  execution  time  required  for  the  output 


transition  to  process  tne  W  data  words  waen  firing.  Reiter 
tnen  determined  a  metnod  for  finding  possible  sequences  of 
firings  of  transitions.  For  cyclic  graphs,  he  found  a  lower 
bound  for  tne  cycle  period  of  tne  graph.  Computation  graphs 
have  been  used  in  the  performance  analysis  of  data  flow 
processors  [27j . 

The  second  paper  by  Karp  and  Miller  [25j  investigated 
parallel  program  schemata  ana  vector  addition  systems.  A 
parallel  program  schema  modeled  parallelism  in  programs  by 
establishing  computation  states  and  rules  for  state 
transitions.  The  concept  of  FORK  and  JOIN  which  nave  been 
applied  to  data  flow  and  other  MiMD  architectures  was 
developed  to  express  the  creation  of  concurrent  processes 
from  a  sequential  process,  and  the  combination  of  concurrent 
processes  into  a  sequential  process.  The  equivalence  of 
petrl  nets,  computation  graphs,  and  parallel  program 
schemata  was  shown  by  Miller  [20j . 

Most  of  tne  research  on  petrl  nets  in  the  United  States 
has  been  conducted  at  MIT.  Commoner  and  Bolt  [ll,12j  studied 
a  deterministic  subclass  of  petrl  nets  hnown  as  marked 
graphs  and  proved  several  theorems  regarding  tnelr  system 
state  spaces.  A  more  general  subclass  of  deterministic  nets, 
persistent  nets,  was  studied  by  landweber  and  Robertson  [13j 
who  proved  that  the  theorems  regarding  marked  graphs  were 
applicable  to  this  class.  A  final  deterministic  subclass 
referred  to  as  state  macnine  decomposable  was  investigated 
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by  Ramcbandanl .  In  addition,  Ramcnandanl  analyzed  tnis 
subclass  with  deterministic  transition  firmer  times  to 
derive  expressions  for  tne  minimum  net  cycle  period  In  a 
manner  analogous  to  tnat  Reiter  used  for  computation  grapns. 

Other  classes  of  petrl  nets  nave  been  defined  which 
Improve  tne  tractabiilty  of  tne  problem  of  finding  solutions 
to  performance  measures  wniie  retaining  characteristics 
which  are  desired  in  the  modeled  systems.  In  particular, 
live,  bounded,  conservative,  and  consistent  nets  nave 
received  the  most  attention.  The  properties  of  these  classes 
will  be  examined  In  detail  in  the  next  section. 

Our  worn  extends  this  previous  woric  by  focusine  on  the 
broader  class  of  nondetermlnlstlc,  consistent  petrl  nets 
which  appears  to  be  the  most  general  class  for  which 
solutions  to  performance  questions  may  be  found.  Vhlle 
nondeterminism  Increases  the  difficulty  of  dealing  with 
petrl  nets  analytically,  much  of  the  previous  wori  on  petrl 
net  structure  remains  pertinent  to  this  class. 
Nondeterminism  allows  tne  net  to  represent  different  types 
of  data,  for  example,  by  regarding  the  data  type  or 
transition  firing  time  as  a  random  variable.  To  analyze  the 
performance  of  nondetermlnlstlc  petrl  nets,  we  consider  tnem 
as  analogs  to  queueing  networic  models.  The  basis  for 
analysis  of  these  models  is  the  classic  work  of  Jackson  [29] 
for  tne  case  of  open  systems,  and  Oordon  and  Newell  [30J  for 
closed  systems.  Both  of  these  models  relied  upon  polsson 
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arrival  processes,  first  come,  first  serve  (FCFS)  queueing 
discipline,  and  exponential  service  departure  processes  to 
ensure  tnat  tne  Maricov  property  was  met  and  allowed  tbe 
system  state  probabilities  to  be  expressed  as  the  product  of 
tne  marginal  state  probabilities.  Tnis  quality  Is  Icnown  as 
the  product  form  solution  and  is  required  for 
computationally  efficient  solutions.  Most  of  the  recent  worjc 
In  queuing  network  theory  has  attempted  to  find  product  form 
solutions  for  more  general  systems.  Jackson  131]  considered 
systems  where  tne  arrival  rates  and  service  rates  were 
functions  of  the  queue  lengths  (states)  at  the  various 
nodes.  Baskett  et  al.  [32J  extended  this  to  open  and  closed 
networks  where  customers  were  of  different  classes  and  tne 
queueing  discipline  was  FCFS,  no  queueing,  and  last  come, 
first  serve  wltn  preemptive  resume  (LCFS-PB).  All  tnese 
cases  were  shown  to  have  product  form  solutions.  In 
addition,  they  showed  that  a  condition  known  as  local 
balance  was  a  necessary  condition  for  product  form 
solutions. 

Chandy  et  al.  [33J  considered  the  question  of  local 
balance  in  more  detail  and  developed  the  more  general  notion 
of  station  balance  which  was  also  shown  to  be  necessary  and 
sufficient  for  product  form  solutions  if  non-exponential 
differentiable  service  distributions  were  used.  In  addition 
they  proved  that  arbitrary  service  distributions  satisfied 
station  balance  if  processor  sharing  (PS)  or  LCFS-FR 
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disciplines  were  used.  In  tne  case  of  exponential  service 
tine  distributions  for  all  service  classes,  tney  showed  that 
FCFS  and  priority  disciplines  resulted  In  station  balance 
belnsr  met.  This  result  has  been  extended  to  any  woric 
conservlni?  discipline. 

In  summary,  It  has  been  shown  that  product  form 
solutions  exist  for  queueing  networks  with  tne  following 
properties: 

1.  ?or  exponential  service,  any  worJc  conserving  queueing 
discipline  may  be  used. 

2.  For  PS  and  LCPS-PR  disciplines,  any  differentiable 
service  distribution  may  be  used. 

3.  Tne  solutions  do  not  depend  on  the  routing  used  for 
the  customers. 

C.  OUTLINE  OP  SUCCEEDING  SECTIONS 

In  Section  II,  we  present  the  formal  definitions  of 
petrl  nets  and  derive  several  useful  properties.  The  state 
space  —  the  set  of  system  states  the  net  may  occupy  —  is 
determined  by  constructing  the  reachability  set  of  the  petrl 
net.  The  conditions  under  which  the  state  space  is  finite 
and  recurrent  are  then  considered.  It  Is  shown  that  nets 
with  certain  structural  cnaracterl sties  give  rise  to  tnese 
restricted  state  spaces.  In  particular,  the  classes  of 
marited  graphs,  state  machines,  and  consistent  nets  are 
considered  because  of  their  relation  to  realizable  systems. 
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In  Section  III  we  turn  to  nets  witn  timed  events.  Tne 


case  of  deterministic  routine  and  transition  time  is  first 
considered.  Next,  tne  (probabilistic)  class  of  state 
macblnes  wltb  nondetermlnlstlc  routine  and  exponential 
transition  times  Is  examined.  It  Is  sbovn  tnat  for  tne  class 
of  state  macnine  decomposable  nets  It  Is  possible  to 
transform  tne  net  Into  a  stochastic  equivalent  net  which  Is 
analogous  to  a  closed  queueing  network.  For  this  class  of 
nets  a  product  form  solution  for  the  state  probabilities  Is 
derived. 

Next,  petrl  nets  which  allow  external  sinks  and  sources 
are  defined.  Again,  It  is  snown  tnat  tne  stochastic 
equivalent  nets  may  be  analyzed  as  queuelne  networks;  In 
this  case  an  open  system. 

Finally,  the  class  of  consistent  petrl  nets  with 
exponential  firing  times  Is  considered  and  it  Is  snown  tnat 
product  form  does  not  exist  for  this  class  of  nets. 


II.  PETRI  NET  THEORI 
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In  tnls  section  tne  relevant  petrl  net  tneory  is  I 

1 

presented.  Muctt  of  the  worn  follows  that  of  Commoner  and  ' 

Holt  [11] •  Craft  and  Miller  [25],  and  Ramchanlanl  [8] .  Tfe 
notation  used  Is  primarily  tnat  of  Peterson  [23]. 

The  petrl  net  was  defined  Informally  In  the  preceding 
section  as  a  means  for  representing  related  events  and  tnelr 
conditions  in  systems.  Ve  now  formalize  this  notion  hy 
defining  me  petrl  net  M  and  Its  directed  graph  i 

representation.  j 

Definition  2.1  N  =  <P,T,I,0> 
where 

P  *  {Pi  I  P4  Is  a  place  In  tne  net}  j 

T  *  itj  i  t;  Is  a  Yrj^^^ltlon  In  the  net}  ' 

I  :  (P]^T)  — >!>}  such  that  If  p^^  Is  an  Input  place 
to  ij  ,  ^  1  and  0  otherwise 

0  :  (P)^T)  — >1^  such  that  If  P|^  Is  an  output  place 
to  tj  ,  0(pf’ ftj)  2i  1  and  0  otherwise 
with  the  requirement  that  Vti  €  T  3Pj  tP^  €  P  ' 

Kpy  ft*  )  ^  0  A  0(p^,ti  )  /  0  and  Ypj  ^ 

Kpjft^)  >  0  »■>  0(pj  ,t£)  =  0 

1 

We  further  define  tne  following  sets: 

»  (p;  I  Kp;  tty)  >  0} 

i 

I 
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li*  »  {Pj  I  0(pj  .tfc)  >  0>  waere  €  T  A  P/ €  P 
and  litcewlse: 

*pj  =  {t£  I  0(pj  ,ti)  >  0} 

pj»  *  itj;  I  Hpj  ft^)  >  0>  wflere  €  T  A  P;  €  P 

Tnese  sets  are  referred  to  as  toe  input  and  output  sets, 

respectively.  Mote  tftat  the  definitions  of  the  functions  I 
and  0  require  that: 

Vtt  €  T,  -t^  ^<P  /\^L*  t\  •t*’  U  ti*  »0 
The  set  of  places  represents  tae  conditions  In  our  informal 
model,  and  the  set  of  transitions  represents  toe  events.  The 
input  and  output  functions  specify  the  preconditions  for  an 
event  to  occur  and  toe  results  of  toe  event  occurrence. 

Corresponding  to  each  petrl  net  we  define  a  bipartite, 
directed  grapn  as  follows: 

VPi*  Pt  €  P  draw  a  circle  representing  a  place 
Vt£  tt  €T  draw  a  vertical  bar  representing  a  transition 
Vt;  ,py  If  Pj  € 'It  draw  a  directed  arc  from  Pj  to 

Vt,  ,Pj  If  Pj€ii*  draw  a  directed  arc  from  t^  to  pj 

We  will  use  the  notions  of  petrl  net  and  petrl  net  graph 
Interchangibiy  (since  they  are  equivalent). 


Example  1. 

Consider  tae  following  petrl  net  N  *  <P,T,I,0>  with 
P  ■  {  P,  f  P* »  Pj  »  Pa  »  Py  •  P*  »  P7  ^ 

T  ■  {  t,  ,  t  t j  ,  t^  ,  tjf  } 

let  n  ■  jlj  and  m  *  .  Then  I  and  0  may  be 


represented  ay  tne  n  X  n  Incidence  matrices: 


1 

1 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

1 

1 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

1 

1 

0 

0 

0 

0 

0 

1 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

0 

0 

0 

1 

0 

0 

0 

1 

0 

wnere  :,j  »  Kp^-.tj) 

and  Cq  ;,y  »  0(p£  ,tj  ) 

The  corresponding  petrl  net  graph  is  shown  In  Figure  2.1. 

If  ve  associate  with  each  place  in  a  petrl  net  N  a 

non-negative  integer  marKlng  function  |LL  t  we  have  the 

following  definition  of  a  marked  petrl  net  M: 

Definition  2.2  &  marked  netrl  net  M  =  <P,T.1 .0,  jLL.> 

where  P,P,I.O  are  defined  as  before  and 
|LL:  P  — >N 

Fach  function  defines  a  marking  of  the  net.  In  graph 

notation  the  petrl  net  eraph  is  extended  to  a  marked  petrl 

net  graph  hy  adding  tokens  to  places  as  follows: 

Vp*  €  P*  °  then  place  n  tokens  (dots)  on 

place  p^‘ . 

Figure  2.2  snows  a  possible  marking  for  the  petrl  net  of 
Sxample  1.  Clearly  a  (countably)  Infinite  number  of  possible 
markings  exist  for  any  petrl  net.  This  marking  represents 
the  (possibly  multiple)  holdings  of  conditions  at 
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soue  Instant  of  execution  and  may  be  rlewed  as  a  description 
of  tde  state  of  tne  net. 


Definition  2.3  k  transition  t  Is  enabled  Iff 
VPj  Pj  €  ‘ti  ”>  |X(py)  ^  I(Pj.t£) 

?or  eacn  marking  jj,^  we  can  define  tne  enabling  set  as 
follows : 

Definition  2.4  Tne  enabling  set.  T  =  itt*  I  ti  Is 

enabled  by  marking 

In  our  grapn  notation,  a  transition  Is  enabled  if  eacn  arc 
directed  Into  tbe  transition  has  a  token  In  Its  originating 
place.  Referring  to  Figure  2.2,  it  will  be  seen  tnat  t,,  t^^, 
and  t^  are  enabled  and  tnerefore  *  {t,  ,  t^,  t^  }. 

Transition  t^  Is  not  enabled  since  tnere  is  no  token  In 
place  pj.  corresponding  to  tne  arc  p^.  — >  t^. 

in  enabled  transition  may  fire  to  create  a  new  marking. 
Tnat  Is,  we  define  a  function: 

Definition  2.5  i  firing  function  for  a  marked  net  M  Is 

F  :jLjL  X  ^  ^  F(|Xj^Pj  )  ,t^-)  =  jLL^Cpj)  - 

Kpj  ft;)  ♦  0(pj,t;)  * 

where  Pj  €  P  A  t^-^Sj,^. 

F  is  defined  for  all  markings  for  wnicn  tne  set  is 
non-empty.  Continuing  with  tbe  vector  notation  introduced 
earlier  for  tne  functions  I  and  0,  we  may  denote  eacn 
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msrfcin^  as  an  n-element  vector  where  n  =  [pj  and 
Un.(l)  ^  {Jin  (Pi)  for  1  »  .  Tnen  F  may  be  expressed 

as : 

=  Ok  -  Cji  +  C^i*  wnere  Cj  i  and  Co«l  are  the  1th 
columns  of  the  Input  and  output  incidence  matrices 
respectively. 

Definition  2.6  ^1ar^ln^  jULj  Is  directly  reachable  fromiJL^lf 
(tj'  €Sk)  a  F(fji^ti)  */LL|  and  Is  denoted  as: 

Heturnlni?  to  our  earlier  example,  transition  tg  may  be  fired 
(recall  that  tne  enabling  set  *  It,  ,  t^g,  14  }  >.  By 

Inspection  of  Figure  2.2,  we  specify  tne  vector  for  marxing 


Tne  resulting  marxlng  fJL^^ 


In  graph  notation,  one  toxen  is  removed  from  eacn  place 
having  an  arc  directed  Into  tne  firing  transition,  and  one 
token  Is  added  to  eacn  place  having  an  arc  directed  from  the 
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firing  transition.  Tne  resulting  mantlne  Is  shown  In  Figure 

2.3. 

Next  we  consider  sequences  of  transition  firings.  Assume 
tne  following  firings  exist  for  some  martced  net  M: 

Tnen  we  denote 

or 

where  tne  firing  sequence  0*ls  some  sequence  of  transition 
firings  ( tj  t  t^t  < •  • « t|i) } . 

Definition  2.7  Mariclng  is  reacnable  from  marlring  ll'f 

3  O*' =>  •  •  •  ->M*1 

wnere  CT*  (t,  ,t;j....tt^) 

If  we  form  the  reflexive,  transitive  closure  of  tne 
transition  firing  relation  we  nave  tne  following  definition: 

Definition  2.0  Slven  a  marsed  net  M,  the  reachaoillty  set 
0(M)  Is  defined  Inductively  as: 
basis:  jUL,  €  Q 

t£ 

Induction:  jULjt  €  OA  3v  €  T  '  ==>  M-imi  €  0 

We  are  Interested  In  determinlne  the  elements  of  the  set 
0(i).  To  do  so,  we  must  first  formalize  tne  previously 
introduced  vector  notation  as  a  vector  addition  system. 
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A.  VECTOR  ADDITION  SYSTEMS 


The  concept  of  vector  addition  systems  was  first 
explored  by  tarp  and  Miller  [25J .  This  section  Is  largely 
derived  from  their  worx. 

A  vector  addition  system  Is  defined  as  a  pair  V  =  (d,W) 
where  d  is  an  r-dlmenslonal  vector  with  l4-€N  and  W  Is  a 

finite  set  of  r-dimensional  vectors  w,  ,  w^ . w^  with 

Wj(l)€I.  The  reacnablllty  set  R(V)  for  a  vector  addition 
system  is  the  set  of  vectors  composed  by  adding  elements  of 
the  set  V  to  d.  That  is 

R{V)  *  (x  I  X  =  d  +  (w,  wj^  +  . . .  +  w^  )  A  x{l)^0 
In  addition*  the  following  terminology  Is  used: 

The  relation  S.  Is  defined  as 

X  ^  y  <*>  for  1  =  1,2, ...,r  x(l)  y(l) 

The  symbol  CJls  defined  such  that  If  n  Is  any  Integer, 

CJ  >  n  and  n  +  CJ  =CJ. 

The  reachability  set  R{V)  can  be  determined  by  constructing 
the  corresponding  reachability  tree  T(7).  Nodes  In  tne  tree 
consist  of  r-dlmenslonal  vectors  x,y,z,...  with 
x(l )€  K  t-Acj) f  for  1  *  1,2,  ...,r  .  The  relation  •<.  is  defined 
as  X  y  <*>  a  directed  path  exists  from  x  to  y  In  T(?).  Let 
d  be  the  root  of  the  tree.  Descendants  are  constructed 
recursively  as  follows: 

1.  If  x  •<  y  and  x  »  y,  y  is  a  leaf  node. 

2.  Otherwise,  construct  successor  nodes  to  y  with 

vectors  y  ♦  w,  ,  y  +  w,,  ...  ,  y  +  w^  where  for  1  ® 


y(l)  +  wj(l)*^0.  In  addition,  If  tnere  exists 
a  node  z  sued  tnat  z  •<  y  and  z.^7  +  w;  and  z(J)  < 
y(J)  *  ^or  some  J,  tnen  y(j)  +  wi(j)  »CJ. 

To  Illustrate  the  construction  of  this  tree  consider  the 
following  example  from  [25J ; 

Example  2. 

Let  ?  »  (d,W)  wnere 
d  *  fl,0,0.0,0j 

E  -  {  [-1.1, 0,0, 0J  .  [-1,0,0,1,0J  ,  [0,-l.2,0.0j  , 
[0,1, -1,0,0]  .  [0,0, 0,-1, 2]  ,  [0,0,0, 1,-1]  } 
The  resulting  reachability  tree  Is  shown  in  Figure  2.4. 

The  followlne  theorems  from  [25]  allow  us  to  answer 
decidability  questions  about  rector  addition  systems  by 
Inspecting  the  reachability  tree. 

Theorem  2,1 

Vi3y  I  y  €R(?)A  (i^y)  <=>  z  I  z  6T(v)  A(i^z) 

The  proof,  while  straight  toward.  Is  rather  len«rthy  and  so 
Is  not  Included  here,  but  may  be  found  In  [25]. 

Theorem  2.2  For  any  vector  addition  system  V,  T(T)  Is 
finite. 

Ve  first  show  the  following  two  lemmas: 


Figure  2,4.  Reacuabillty  tree  for 
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,  0  ) - (  0,0, 0,0, 2  > — (0 


f 


Lemma  2.2.1 

Let  p,  *p«»p,f  ••••Pn»  infinite  sequence  of 

elements  of  (|vf  UkJi)  •  Tben  tnere  exists  an  infinite 
subsequence  P» fPi tPc ♦ • • • »Pa  ♦  •  •  •  sucn  tnat 

Pa^  Pi^PelS-*  •  •  Pail*  •  *  * 

Proof.  Construct  an  Infinite  subsequence  by  selecting 
elements  wltn  first  entries  nondecreaslng.  From  tnis 
sequence,  construct  an  Infinite  subsequence  with  second 
entries  nondecreasing,  and  so  on. 

Lemma  2.2.2  (K'dnlg  Infinity  Lemma)  Let  T  be  a  tree  sucn 
tnat  eacn  rertex  nas  a  finite  number  of  successors  and 
tnere  exists  no  infinite  directed  patn  from  the  root. 
Then  T  is  finite. 

Proof.  Since  eacn  vertex  nas  a  finite  number  of 
successors,  let  n  be  the  maximum  number  of  successors 
for  any  node.  Then  tnere  are  at  most  n  paths  of  iengtn  1 
from  the  root,  and  If  p  Is  some  node  in  the  tree,  there 
are  at  most  n  paths  of  length  1  In  the  subtree  having  p 
as  Its  root.  Since  no  Infinite  path  exists  by 
assumption,  let  m  be  tne  maximum  path  length.  Then  the 
maximum  number  of  nodes  is  n"’  and  T  is  finite. 

Proof  of  theorem  2.2. 

Assume  there  exists  an  infinite  directed  path  from  the 
root  of  T(7)  with  node  sequence  p, ,Pj,p,, . • . ,p„, . • . 
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Tiien  by 


ICfTima  2.2.1,  mere  exists  a  subsequence 


P,  »Pk»Pe,*  ••••Pat  •••  wltft  Pfc^  Pt'^  •  •  •  P«^  •  •  •  •  By 
definition,  if  p„  *  tnen  p^  is  a  leaf  node  and 
therefore  the  inequality  is  strict  and 
P^  ^Pt  <P<^*^<^Pa  <•••  •  Again  by  definition,  since 

P*  <Pkt  Pk  mist  have  one  more  entry  equal  to  CJ  than  p^. 
Since  tne  number  of  entries  is  finite,  this  is 
impossible  and  therefore  no  such  infinite  directed  path 
exists.  By  lemma  2.2.2,  T(7)  is  finite. 

Using  these  theorems,  it  is  possible  to  prove  tne  following 
decidability  theorems  about  the  reachability  set  R(V): 

Theorem  2.3  Given  some  finite  n^/v/  , 

Vt  X  €  R(7)  A  (x(i)^  n)  is  decidable. 

Proof.  Construct  T(T).  By  tneorem  2.2  T(V)  is  finite. 
Therefore  Vy  y  €T(7)  decidable.  By  theorem 

2.1  then,  the  question  is  decidable  for  R(V). 

Tneorem  2.4  Given  some  subset  of  tae  entries  for  tne 
r-  dimensional  vector  addition  system  GC  u,2....r}, 

Vx  3y  y  €  R(?)  A  1  €  0)  . 

y(l)  ^z(i)  is  decidable. 

Proof.  By  the  definition  of  T(?),  this  property  holds  iff 
there  exists  a  leaf  node  z  such  that  Vi  i€0  ^(i)  ^CJ  • 
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Theorem  2.5  Slven  a  vector  addition  system  R(7),  it  Is 
decidable  vnetner  R(7)  is  finite. 

This  result  follows  directly  from  theorem  2.4. 

Theorem  2.6  Slven  two  vector  addition  systems  V  and  1', 
R(7)^R(?')  Is  unlecldable. 

Rabin's  proof  for  this  result  appears  in  Baker  [34j . 

It  Should  be  noted  that  tne  general  reachability  problem 
l.e.,  given  z^]\j’'ls  i€R(V)f  Is  not  determined  by  the 
reachability  tree.  However,  an  algorithm  for  solving  the 


reachability 

problem  has 

been 

found  [35] . 

Therefore , 

the 

reachability 

problem 

Is 

decidable 

(although 

the 

computational 

complexity 

Is  not 

known) . 

This  completes  our  study  of 

vector  addition  systems. 

Ve 

next  demonstrate  the  correspondence  between  vector  addition 
systems  and  marked  petrl  nets.  Let  M  *  <P,T,I,0,^  be  an 
arbitrary  marked  petrl  net.  The  corresponding  vector 
addition  system  7(d,W)  may  then  be  constructed  in  the 
following  manner: 

let  the  dimension  r  =  |p| 

let  d  »|LL,  wnerejUL,  is  an  Initial  marking  for  M 
let  W  ■  {wj^l  tf  €  T,pj€  P  =  0(pj,tt' )  -  Kp;  ,tj)  > 

Note  that  jvj  «  |  t|  and  that  elements  of  W  reflect  tne  net 
change  in  marking  resulting  from  the  firing  of  a  transition 
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In  M.  THIS  leads  to  tne  following  tneorem  relating  me 
reachability  sets  of  M  and  7: 

Theorem  2.7  0(M)  *  H(7) 

Proof.  1).  Q(M).3r(7).  Let  x€R(M).  Then 

.a>x  .  By  definition  of  ^  k* 
F(/JLtt,-)  =/LjL+  Wfc  and  substituting  for  t,  ,  t^t  tj ,  .... 
t.,  In  the  firing  sequence  /J.+  w,  w-^  +  . . .  »  x 

Since  d  by  definition,  . 

11).  <?(M)£r(7).  Let  X  6H(7).  Then 

X  ■  d  +  w,  +  «^  ♦  ...  .By  the  same  reasoning  as  case 

1 .  ...  ^  X  . 

Using  theorem  2.7  and  the  results  for  vector  addition 
systems  ve  state  the  following: 

Theorem  2.8  Slven  a  mariced  petri  net  M  with  Initial 
marfclngjUL^  ,  It  Is  decidable  If  the  reachability  set  0(M) 
Is  finite. 

Theorem  2.9  Slven  a  marked  petri  net  M  with  Initial 
marking  fi*  .  it  Is  decidable  If  there  exists  k^H*  such 
that  for  all  elements  of  the  reachability  set  Q(M). 
each  entry ]LjL(  1  k. 

Definition  2.9  A  marked  petri  net  M  Is  k-bounded  iff 
3k  iVp.  jUL€Q(M)  »»>p.(l)^k  . 
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Figure  2.5.  Reachabllliy  tree  for  Bxatnple  1 
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Definition  2.10  k  marked  petrl  net  M  Is  safe  Iff  It  Is 
k-bounded  with  k  >  1  . 

Ve  complete  tnis  section  by  once  again  considering  Example 
1.  Define  tne  corresponding  vector  addition  system: 

?  s  (d,V)  vltn  d  a  [2yl,l,0,0,0,0J  as  Indicated  by 
Fleure  2.2. 

W  -  {  [-l,0,0,1.0.0.0j  .  [-1,-1,0.1,1,0,0J  , 

[0.1. -1,0, -1.1,0]  .  [0,0, -1,0. 0,0,1]  , 

[0,0, 1,0,0, 0,-1]  } 

Next,  construct  the  corresponding  reachability  tree  T(T). 
The  tree  Is  shovn  In  Figure  2.5.  By  Inspection,  the 
reachability  set  R(V)  is  determined  to  be: 

{  [2, 1,1, 0,0, 0,0]  ,  [1,1, 1,1, 0,0,0]  ,  [1,0, 1,1, 1, 0,0]  , 

[2, 1,0, 0,0, 0,1]  ,  [0,1, 1,2, 0,0,0]  ,  [0,0, 1,2, 1,0,0]  , 

[1,1, 0,1, 0,0,1]  ,  [1,1, 0,1, 0,1,0]  ,  [1,0, 0,1, 1,0,1]  , 

[0,1, 0,2, 0,0,1]  ,  [0,0, 0,2, 1,0,1]  ,  [0,1, 0,2, 0,1,0]  , 

[0.0, 0,2, 1,1,0]  > 

This  (finite)  set  is  also  0(M)  and  therefore  M  Is  k-bounded 
vlth  k  a  2. 

B.  SUBCLASSES  OF  MARKED  PETRI  NETS 

The  nets  investigated  in  the  preceding  parts  of  this 
section  are  more  properly  referred  to  as  generalized  petrl 
nets.  Analysis  of  generalized  nets  has  proved  to  be  somewhat 
intractable.  As  a  result,  several  properties  of  petrl  nets 
have  been  studied  which  define  subclasses  of  the  generalized 
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nets.  Tbese  restrictions  appear  to  be  Justified  in  tbat  man7 
(if  not  most)  actual  systems  may  be  modeled  by  the 
restricted  nets. 

Definition  2.11  A  transition  t  T  Is  live  for  marltingjjL* 
iff 

->30-'.  At,-6  Sk. 

where  is  the  enabling  set  forjUj^. 

If  a  transition  is  live,  a  firing  sequence  may  always  be 
found  which  will  allow  it  to  be  fired  indefinitely  often. 

Definition  2.12  A  marked  petri  net  M  is  live  iff 
Vt  t€T  «>  t  is  live  for  marking  JLL, 

In  systems*  llveness  is  often  associated  with  the  problem  of 
deadlock.  Back  [36]  has  shown  that  llveness  is  equivalent  to 
the  reachability  problem*  therefore*  it  is  decidable. 

Definition  2.13  A  place  p^- €  P  is  conflict  free  iff 
t,  ,  tjj,  •  •  • »  t^  €  P<*  A  i  »'  € 

"3tj  J  #  1  A  t;  € 

for  any  marking*  a  conflict  free  place  may  not  enable  more 
than  one  transition.  In  figure  2.6*  place  p,  is  not  conflict 
free  since  both  t,  and  t^  are  enabled. 

Definition  2.14  A  petri  net  M  is  conflict  free  iff 
Vp  p  €P  ■•>  p  is  conflict  free. 
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A  Stronger  statement  concerning  places  is  the  following: 

Definition  2.15  i  place  p  Is  decision  free.  Iff 
1«P;[  -  |Pi«|  =  1  • 

Definition  2.15  A  marked  petri  net  M  Is  a  marked  graph  Iff 
Vp  P  *=>  P  is  decision  free. 

A  final  property  of  petri  nets  may  be  defined; 

Definition  2.17  A  marking  is  persistent  Iff 

VjfjLt6s  A  -=>  t€s^  V  teo: 

A  persistent  marking  Is  one  In  wnlcn  an  enabled  transition 
remains  enabled  until  It  Is  fired. 

Definition  2.18  A  petri  net  M  Is  persistent  Iff 
Vt  t  €T  «*>  t  Is  persistent  torf±^. 

The  question  of  persistence  Is  Important  In  tne  analysis  of 
petri  nets  and  therefore  we  present  a  decidability  theorem 
for  these  nets; 

Theorem  2.10  Given  a  k-bounded,  marked  petri  net  M,  It  Is 
decidable  whether  M  Is  persistent. 

Proof.  Since  M  is  k-bounded.  Its  reachability  set  0(M)  Is 
finite.  For  each  6  0  construct  the  enabling  set  Sj^. 
Tor  each  t£  €  determine  where  .  If  S,,,, 

-  {tj')  ,  M  Is  persistent. 
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Note  ttiat  all  conflict  free  nets  (and  tnerefore  all  marked 
graphs)  are  persistent.  We  next  consider  some  aspects  of  the 
petrl  net  classes  navlng  these  properties. 

1.  Harked  Graphs 

Marked  graphs  nave  been  extensively  studied  by 
Commoner  and  Holt,  among  others  [11,12].  Here  we  present 
some  pertinent  results  of  tnelr  work. 

Recall  from  eraph  theory  the  following  three 
definitions: 

Definition  2.19  Let  D  •  <A,R>  be  a  digraph  with  nodes  a 
and  b.  i  jiirected  patn  from  a  to  b  Is  a  finite  sequence 

of  nodes  P  *  (c^ *c  , , . . . *c„)  such  that  c*  *  a,  c^  =  b, 
and  for  all  c,-  with  0^i^n  Cj-Rc,,^,  .  If  a  =  b,  P  Is  a 
directed  circuit. 

Definition  2.20  A  digraph  D  =  <A,R>  Is  strongly  connected 
If  for  every  two  nodes  a,b€A,  there  Is  a  directed  path 
from  a  to  b  and  b  to  a.  If  there  is  an  undirected  path 
from  a  to  b,  D  Is  connected. 

Definition  2.21  A  component  of  a  digraph  D  is  a  connected 
subdigraph  of  D  which  is  not  a  proper  subdigraph  of  any 
connected  snbdigraph  of  D. 

The  constraint  on  the  input  and  output  transitions  to  a 
place  makes  It  possible  to  replace  every  place  with  a  single 
directed  arc  between  its  input  and  output  transitions.  In 
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this  way  the  petri  net  reduces  to  a  digraph  simplifying 
analysis.  The  itiarhed  «raph  may  then  be  more  simply  defined 
as: 


Definition  2.22  A  mariced  graph  M'  *  <T'»E',jUl/>  is  a 
three-tuple  ^fhere 


T'  -  T 

B'  :  TXT  ~>  {0»1} 
where  E{t^,ij)  * 
fJL'  :  t'  — where 


If  3p  o(p,t ‘) 
A  Kp.t;)  =  1 

otherwise 


*  1 


..ere  tijes  A  .p-  ^  It;}  A  p„»  =  i‘jl 
(Here  we  hawe  synonymously  defined  the  edee  set 
B'  »  {e«*j}  where  tne  edge  directed  from  node  1  to 


node  J  e«Y€E'  Iff  E'(ti,tj)  *  1 


Additionally  define  tne  toten  count  N  as: 


Definition  2.23  The  tohen  count  of  a  eraph  is  a  function 
N  :  P  — where 

if  P^B  then  N(P)  for  e,€P 

C»»  ' 

Figure  2.7  shows  the  graphical  representation  of  a  marked 
graph  where  the  number  of  tokens  on  an  edge  eij  corresponds 
to  The  following  theorems  and  proofs  appeared  In 

[llj : 
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Theorem  2.11  i  marJclng  |jl  Is  live  Iff  the  tolcen  count 
N  >  0  for  every  directed  circuit  in  M. 

Proof.  1).  Assume  fJ.'  Is  live  and  N(B)  *  0  for  some 
directed  circuit  B  and  ecj  Is  an  edee  in  that  circuit. 
By  definition,  a  sequence  CT  exists  which  enables  t^ . 
After  firing  jLL'(eij  )  »  1  and  therefore  N(B)  =  l  In 
contradiction  with  the  assumption. 

11).  Assume  N(B)  >  0  and  tj  Is  a  node  In  directed 
circuit  B.  If  ty  Is  enabled,  tj  Is  live.  Otherwise  let 
tj;  be  a  node  In  B  such  that  Is  In  B.  If  t^  Is 

enabled,  fire  it  resulting  In  ij  being  enabled.  If  not, 

continue  to  baclctracic.  Since  the  path  leneth  of  B  must 
be  finite  In  the  directed  circuit  beginning  and  ending 
^Ith  tj,  this  procedure  must  halt  and  therefore  tj  is 
live. 

This  leads  Immediately  to  a  corollary: 

Corollary  2.11.1  A  marking  which  is  live  remains  live 
after  firing. 

Theorem  2.12  A  live  marking  is  safe  Iff  every  edge  In  the 

graph  is  In  a  directed  circuit  with  token  count 

N(P)  »  1. 

Proof.  Clearly,  tne  token  count  of  any  directed  circuit  Is 
constant.  If  N(P}  «  1  then,  the  edges  of  the  directed 


by  tne  same 


circuit  must  be  safe.  If  N(P)  K  >  i  , 
process  as  in  tneorem  2.11  transitions  in  the  circuit 
may  be  fired  until  K  tokens  appear  on  tne  same  edge. 

Theorem  2.13  For  every  finite,  strongly  connected  grapn  G 
there  exists  a  live  and  safe  marking  for  the 
corresponding  marked  grapn  M'. 

Proof.  By  definition,  each  edee  in  G  must  lie  in  a 
directed  circuit.  Since  G  is  finite,  a  finite  number  of 
directed  circuits  exist.  Therefore  construct  by 

placing  one  token  arbitrarily  on  each  directed  circuit. 
The  coadltlons  of  theorems  2.11  and  2.12  are  met  and 
is  live  and  safe. 

2.  State  Machine  Decomposable  Nets. 

i 

This  class  of  petri  nets  has  been  studied  by 
Ramcnandanl  [9].  A  state  machine  is  defined  as: 

Definition  2.24  A  marked  petri  net  K  is  a  state  machine 
iff 

Vt  t€T  ACKPitt)  >  0]  A  [I(Pj»t)  >  0j  =*>  p  =  py 
Vt  t^T  A  Co(p^•,t)  >  0J  A  [o(pj,t)  >  0J  =»>  p^*  =  py 
That  is,  Vt  I  vtj  ■]t»|  *  1. 

This  restriction  results  in  nets  which  are  functional 
equivalents  of  finite  state  machines,  hence  the  name  state 
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machine.  Note  toat  state  machines  allow  conflict  l.e., 
nottdeterminl sn . 

Definition  2.25  A  subnet  li^;  Is  a  strongly  connected 
component  of  M. 

Definition  2.25  A  petrl  net  M  Is  state  macnlne 
decomposable  Iff 

)  I  OPt  aP  A  =T  A  M  Is  a  state  macnlne. 
Several  properties  of  state  macnines  may  easily  be  snown. 

Tneorem  2.14  Tde  token  count  N(M)  is  constant  for  a  marked 
state  macnlne. 


Proof, 

Assume 

N(M)  a  C  and  t<6T. 

By 

definition 

• 

u 

|ti.l»  1 

.  Let  {p,>  »*t£  and 

{p,> 

a  tj*  with 

N(p,  ) 

»  c,  and 

N(pj^)  a  c^  .  If  tj  does 

not 

fire,  tne 

token 

count 

of  p,  and  p^  are  unaffected 

by  t^-.  If  tt 

does 

f  1  re ,  by 

definition  N(P|)  c,-  1  and 

N{p 

• 

4 

o 

II 

Summing  we  nave: 

j^N(p)  =C,  -l+C;j  +  laC,+Cj 

and  tbe  token  count  does  not  cnanre . 

Corrolary  2.14.1  Bvery  marked  state  macnlne  is  bounded. 

Proof.  Since  tbe  token  count  N(M)  is  constant,  tne  maximum 
number  of  tokens  at  any  place  is  N(M);  therefore  M  Is 
bounded. 
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3.  Consistent  Petri  Nets. 

Aa  additional  class  of  petrl  nets  are  tnose  for 
which  there  exist  consistent  current  assignments. 

Definition  2.27  A  petrl  net  M  is  consistent  iff  mere 
exists  a  function  c|> :  T  — >  I  such  that 

1.  Vti^T  <$(1^  )  «  <p^- 

2.  Vp€P  Kp.t  )  =  0{p,t:) 

t»*  j*i 

Where  in  me  summation  n  =  flj  . 

The  function  c|>  is  analogous  to  an  electromagnetic  flux  and 
the  Cpt's  are  referred  to  as  the  currents  associated  with 
transitions  tj.  Note  mat  part  2  of  tne  definition  is  an 
expression  of  Klrthoff's  Law.  Part  2  requires  solving  me 
following  set  of  linear  equations: 


Ct . . . 

• 

• 

• 

• 

• 

• 

<p, 

Co  ',1 . 

• 

• 

• 

• 

0, 

• 

. 

• 

k 

• 

• 

Cq  < . 

0. 

where  and  are  tne  incidence  matrices  for  M. 
If  a  non-xero  solution  exists,  M  is  consistent. 

Example  3.  Consider  the  net  in  Figure  2.8. 


0  110  0 

1  0  0  0  0 

Construct  C^  » 

0  0  0  1  0 
0  0  0  0  1 
1  0  0  0  0 

Co  » 

0  10  0  0 
0  0  10  0 
0  0  0  1  1 
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Cj  X  <$  = 


0  110 
0  0  0  1 
0  0  0  0 
10  0  0 


Cq  XC$= 


10  0 
0  10 
0  0  1 
0  0  0 


cp^*cp^  -<J>, 


^“4>r 

0r  2  <p9"0*“  ^ 


Therefore  M  Is  consistent. 


The  sienlflcance  of  consistency  Is  that  a  consistent  system 
will  cycle  —  glren  an  Initial  marking  |UL.»,  there  exists  a 
firing  sequence  sucn  tnatp,,  Inconsistent  system 
will  either  consume  tokens  and  halt  or  produce  tokens  and 
become  unbounded.  Tnese  results  are  summarized  In  two 
theorems  by  Ramchandanl  [8]. 


Theorem  2.15  A  petrl  net  M  Is  consistent  Iff 

-1  cr 

®  cycle. 

Proof.  1).  let  <Pt*  <P^  •  *  *  the  consistent  currents  of 

the  transitions  of  M.  let  |LAy(p,)  =  +  Cp  +  cj>  *C  wnere 

<pi***<pm  correspond  to  t4...t,€Pc« 


Then  let 


Cr»  {tj.tjj...}  wnere  tue  nultlpllclty  of  InCTls 
equal  to  Its  current  glrlng  .  Since  tfte  sum  of 

tne  currents  Into  and  out  of  a  place  Is  0, 

yi,iVc)  »JUL.j(pi)  and  fJ^’fJUj  •  Therefore  CTls  a  cycle. 
11).  Let  he  a  cycle.  Then  =>|Ul..  (p,  )  •  let 

k,  . ic^  be  the  multiplicity  of  transitions 

t,  tt^f ‘ft.  ^flp^  and  i,  ,lj^,...,l^  be  the  multiplicity  cf 
transitions  t ^  . .  •  ,t^^p^#  . 

cfXtj  )  »  s;  if  tj^*p^‘  and<$(tj)  =  1;  if  t;gp^.#  .  This  Is 
a  consistent  current  assignment  and  therefore  M  is 
consistent . 

Theorem  2.16  A  petrl  net  M  with  a  live,  bounded  mariclnip 
is  consistent. 

Proof.  Since  M  is  bounded,  its  reachability  eraph  0(fi)  is 
finite.  Since  M  is  live,  mere  exists  a  strongly 
connected  subgraph  which  contains  fj,  .  Therefore,  there 
exists  a  directed  circuit  in  the  subgraph  flrine  all 
transitions.  This  is  a  cycle  and  therefore  is 

consistent. 

We  conclude  our  description  of  petrl  net  subclasses  by 
considerinc  the  hierarchical  relationsolps  between  classes. 
In  the  sections  on  marked  graphs  and  state  machines,  it  has 
been  shown  tnat  both  are  contained  within  tne  class  of 
bounded  petrl  nets.  It  is  easy  to  show  that  the  containment 


Is  proper.  Figure  2.9  snows  a  net  wnicn  Is  bounded  but 
neither  a  mariced  grapb  nor  a  state  machine.  The  Intersection 
of  the  class  of  marhed  graphs  and  state  machines  are  a 
degenerate  class  we  call  sequential  processes.  Theorem  2.16 
showed  that  all  live*  bounded  mariced  nets  are  consistent. 
Once  again,  the  containment  Is  proper  —  Figure  2.10  Is  an 
example  of  an  unbounded  non-llve  net  which  is  consistent. 
Finally  note  that  all  persistent  or  conflict  free  nets  are 
deterministic  and  therefore  may  be  reduced  to  decision  free 
nets  l.e.,  marxed  graphs.  These  relationships  are  summarized 


in  Fleure  2.11 


111.  STOCHASTIC  PETRI  NETS 


To  tois  point  we  hawe  analyzed  petri  nets  on  tne  basis 
of  tneir  structural  cnaracteristics.  To  utilize  petri  nets 
for  computine  performance  measures,  it  is  necessary  to 
introduce  tne  concepts  of  time  and  nondeterminism  to  tne 
basic  model.  We  turn  first  to  tne  question  of  modeling  time 
in  petri  nets. 

&.  TIMED  E7ENTS  IN  PETRI  NETS 

&n  Important  concept  in  Section  II  was  tne  maricing,  or 
system  state,  of  tne  net.  Tne  maricing  gives  an  instnntaneous 
description  of  tne  token  content  of  eacn  place  in  tne  net. 
Tne  marking  was  cnanged  as  n  result  of  tne  firing  of  a 
traasitlon.  We  defined  a  flrlne  sequence  as  an  allowable 
ordering  of  transition  firings  in  accordance  witn  tne  rules 
for  enablinr  transitions.  By  controlling  tne  dynamics  of  tne 
transition  firing  process,  it  is  possible  to  analyze  tne 
cnanges  in  system  state  as  a  function  of  time. 

Several  autnors  nave  addressed  tne  question  of  adding 
timing  considerations  to  petri  nets.  Two  different 
interpretations  nave  resulted  from  tnis  work.  Sifakis  [37J 
has  proposed  that  once  enabled,  transitions  fire 
instahtaneously .  A  delay  is  then  introduced  before  tokens 
are  available  at  the  output  places  for  possible  enablings  cf 
other  transitions.  An  alternative  view  is  that  taken  by 
Ramchandani  [S]  and  Zuberek  [38].  In  their  models,  once 
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enabled*  transitions  fire  after  a  delay  called  tne  firing 
tine.  After  the  firing  time  Is  completed,  the  net  changes 
state  by  moving  the  appropriate  toJcens.  These  two 
)  Interpretations  appear  to  be  equivalent.  Ve  choose  to  use 
the  latter  interpretation  to  conform  to  the  usual  notion  of 
a  queueing  service  center. 

We  first  consider  the  case  where  transition  ririnrs 
occur  at  discrete  time  epocns  *Tj,Ta»  •  •  •  *1^  .  •  •  •  w^ere  T,j  Is 
the  Instant  of  the  nth  firing. 

Definition  3.1  The  system  state  of  a  marJced  petrl  net  M  Is 
a  function: 

0;T  — >|JL 

where  "J*  *  ^  •  •  • }  » 

=|ULo  . 

and  0(r„)  =/uLk  =->3  )  *|LL/ AjLLj 

U  Is  a  step  function  with  discontinuities  at  those  Instants 
of  time  In  which  the  system  changes  stats. 

Definition  3.2  The  firing  time  I  of  a  petrl  net  Is  a 
function: 

X:T— >R'^ 

where  Vt^  €  T  Kt^- )  "Tj  »  x 

By  this  definition,  X(  is  the  time  required  for  a  firing  of 
the  transition  t^. 
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By  specifying?  tne  firing  tine  function  X,  It  Is  possible 
to  describe  0('Tii).  section  we  consider  the  case  where 
the  transition  firing  times  are  constant  for  all 
transitions.  This  restriction  maxes  it  possible  to  describe 
a  total  ordering  of  transition  firings  for  persistent  nets. 
In  the  case  of  allowed  conflict  between  transitions*  It  is 
necessary  to  Impose  a  priority  scheme  on  transition  flrlnes 
to  resolve  tne  conflict  (that  is,  to  mase  tne  firing 
deterministic).  This  ordering  amounts  to  a  restriction  on 
tne  firing  sequences  which  are  allowed.  Those  sequences  (T 
for  which  the  ordering  holds  are  termined  feasible  firing 
schedules.  Ramchandanl  has  shown  that  for  timed  marked 


graphs  and  live,  safe,  and  persistent  petrl  nets  a  periodic 
feasible  firing  schedule  exists,  fle  additionally  derived  an 
upper  bound  on  tne  computation  rate  (cycle  period)  for  state 
machine  decomposable  nets.  The  bound  Is  given  by: 
pmai  =  mlnCp,  p^,p^J 

where  p^  Is  the  cycle  time  for  each  circuit  In  tne 
corresponding  net  and  Is  given  by: 

N(C£) 


2!*i 

JV  * 


<Pc 


Where  N(C^)  Is  tne  token  count  for  circuit  , 


X ;  Is  the 


sum  of  the  firing  times  for  the  transitions  In  C^* ,  and  C^^ls 
the  current  associated  with  that  circuit  In  a  minimal 
current  assignment.  Hamchandanl  also  argues  that  this 
formula  can  serve  as  a  first  order  approximation  where  the 


mean  flrlnr  times ‘xj-  are  substituted  for  tne  deterministic 
flrlB?  time  in  tae  formula.  A  siigatiy  different 
derivation  of  tae  same  result  was  made  by  Ramamoortny  and  Ho 
C39J . 

B.  MARA07  ANALTSIS  OF  P£TRI  N£TS 

Hesearctt  into  tne  benavior  of  timed  petrl  nets  to  date 
nas  concentrated  on  deterministic  nets  wita  constant  firing 
times.  As  noted  in  Section  1«  tnis  approacn  fails  to  account 
for  tne  randomness  and  uncertainty  wnicn  cnaracterize  actual 
systems,  tfe  propose  tnat  nondeterminism  be  modeled 
probabilistically  in  toe  net.  Our  metnod  differs  from 
previous  vorK  by  empoasizine  tae  stocaastic  nature  of  tne 
system  state  (marking).  In  tnis  way,  it  is  possible  to  apply 
tne  linown  metaods  of  queueine  taeory  to  analyze  tne 
probabilistic  properties  of  taese  nets  waica  we  call 
stocnastic  petri  nets.  We  introduce  in  tnis  section  two 
sources  of  nondetermlnism  waica  will  be  modeled  by  tae 
stocaastic  petrl  nets  —  random  transition  firing  times  and 
tae  probabilistic  firing  of  simultaneously  enabled 
transitions. 

We  first  snow  taat  if  tne  firing  time  x  for  eacn 
traasltien  is  considered  to  be  a  random  variable  ratner  tnan 
a  deterministic  one,  it  is  possible  to  analyze  the  toicen 
content  of  tne  net  as  a  stocnastic  process. 
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Definition  3.3  Tfie  firing  time  I,;  Is  an  Independent, 
Identically  distributed,  random  variable  sucn  tnat 
Vti  6  T  Is  itie  f Irlni?  time  for  me  ntn  flrln<;  of 
transi  tl  on  t^  . 

The  requirement  tnat  is  Independent  and  identically 
distributed  is  necessary  for  our  derivation  of  a  Martov 
cnaln  representation  for  tee  net  state  space.  In  the  case  of 
computer  networts,  Klelnroct  [40j  has  Investl^rated  this 
requirement  which  he  has  named  the  message  independence 
condition.  This  assumption  is  somevnat  artificial  in  that  it 
implies,  for  example,  that  the  time  required  to  process  the 
sane  message  at  two  nodes  is  independent.  This  difficulty 
notwithstanding,  results  for  an  analysis  of  the  ARPA  net 
Show  some  evidence  for  the  validity  of  this  assumption  [41] . 
Applying  the  methods  of  probability  theory,  tne  firing  time 
distribution  may  be  defined  as: 

Definition  3.4  Tor  ail  tj^T,  if  Is  tne  firing  time  for 
't  * 

S£(x)  »  ?[tiS  X] 

In  the  usual  way  we  define  the  density  function: 

Definition  3.5  For  all  transitions  t^  ^  T,  tne  firing  time 
density  function  is  given  by 

S({x)  »  d/dx  [Sj;(x)J  »  »  x] 
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Likewise  define  tbe  moments: 


Definition  3.6  The  nth  moment  of  the  firing  time  density 
function  is  given  by: 

StXj  f  -  I  x^’s^  (x)dx 

V-OB 

and  in  particular  B[X^J  mean  firing 

(service)  time*. 

Tnese  definitions  make  it  possible  to  model  systems  by 

applying  the  appropriate  distributions  to  the  flrine  time 

function.  It  is  clear  that  the  feasible  firing  sequences  CT 

for  a  petrl  net  are  no  lonrer  deterministic.  It  is  necessary 

to  consider  now  this  nondeterminism  can  occur  in  the  net. 

Referring  to  Figure  3.1(a)«  it  can  be  seen  that  transitions 

t2  dnd  t^  are  both  enabled,  dith  random  firing  times,  the 

sequences  and  possible.  In  this 

instance  the  effect  of  the  nondeterminism  is  unimportant  to 

overall  system  operation  since  the  two  processes  are 

independent  at  this  point.  A  more  interesting  situation  is 

depicted  in  Figure  3, 1(b).  The  transitions  t^ ,  and 

are  in  conflict.  To  analyze  this  type  of  nondeterminism  it 

is  necessary  to  specify  the  branching  probabilities  for  each 

of  me  possible  paths.  There  are  several  possible  ways  this 

may  be  accomplished.  For  example,  each  simultaneously 

*  The  mean  service  rate  jjL  is  an  unfortunate  conflict  in 
notation.  Due  to  its  lone  standing  use  in  the  literature,  we 
will  use  this  notation  pointing  out  its  meaning  where 
confusion  might  exist  with  the  earlier  definition  of 
marking. 
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enabled  transition  nay  begin  firing  at  once  wltn  tne 
transition  vnlcn  completes  firing  first  causing  tne  marKlng 
to  cnange.  Tne  problem  of  determining  vnlcn  transitions  are 
simultaneously  enabled  is  a  significant  one.  Ve  can  simplify 
the  problem  by  restricting  our  analysis  to  free  choice 
places. 

Definition  3.7  A  place  p  Is  free  cnolce  Iff 

|p..|  »  1  =“>  "V  * 

A  free  cnolce  place  Is  one  vnlcn  eltner  has  a  unique  output 
transition  or  Is  the  only  Input  place  to  each  of  Its  output 
transitions.  This  restriction  ensures  that  a  marking  for  p 
vlll  eltner  enable  all  of  Its  output  transitions 
simultaneously*  or  vlll  enable  none  of  them.  With  this 
restriction*  It  Is  nov  possible  to  define  tne  brancning 
probabilities  for  the  output  transitions  of  a  free  choice 
place. 

Definition  3.8  The  branching  nrobablllty  for  a  free  choice 
place  p^  vlth  p^#  ■  {t,  .t^**  ••  *!„>  Is 
Oij  »  P[tj  vlll  fire  I  t,  *t2*...,t^-  are  enabled] 
such  tnat: 

0  <bij<  1 

and 

^bij  «  1  vnere  n  -|pf.| 
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We  make  tbe  assumption  tnat  these  proDablil ties  are 
functions  of  the  flrlne  distributions  for  me  output 
transitions  only  and  in  particular,  tnat  they  are  constant 
and  independent  of  the  marking. 

By  allotfing  these  sources  of  nondeterminism,  the  system 
state  U  may  be  expressed  as  a  stochastic  process. 

Definition  3.9  Let  U(T),  the  system  state  of  a  petrl  net 
M,  be  a  random  variable  and  a  function  of  time  where 
D(T)  =  [u,  (T)  ,Ujj('r) , . . .  ,u^  (T)3  such  that  u- (T) 
n(  )  is  a  discrete  state,  continuous  time  stochastic 
process  described  by  the  probability  distribution: 

®  p[D  ('!**()  ^  f-^n  ^ 

U(T)  describes  the  manner  in  which  the  system  moves 
between  states  in  the  reachability  set.  It  should  be  noted 
that  the  distribution  f^  (|J.:T)  is  equivalent  to  expressing 
the  probability  that  some  feasible  firing  sequence  (j  exists 
such  that  .  Therefore,  it  is  possible  to  extend  the 

definition  of  liveness. 

Definition  3.10  A  transition  t  6T  is  live  for  state  U 
iff 

Vo  3a;  aj  S^o  A  p[O’,l>0  **> 

3 0  ^O^A  P«7^] >0  A  €  S,^ 
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Theorem  3.1  For  a  live  stocftastlc  petrl  net  li  with  marJtln* 
and  Initial  maritlng  fJLo€0(M), 

p[a(r)  “M-i]  >0 

Proof.  Assume  p[ll(r)  “  *•  probability  tnat 

a  flrlne  sequence  O' exists  sucn  tfiat  is  zero  In 

contradiction  wltn  tne  assumptions  of  Definition  3.10 
and  therefore  M  cannot  be  live. 

We  are  Interested  In  determining  tne  conditions  for  wnlcn  U 
is  a  Marfcov  chain,  that  Is,  when 

PC0('fJ,4,  )  “fl-n,/  '  ^  •••* 

,tr(r*)  “M-J  =  pCoC-ai  )  “M-nW  ! 

In  addition,  we  are  Interested  In  determining  the 
stationary  (time  Independent)  state  probabilities  If  they 
exist.  We  first  consider  the  case  of  state  machine 
decomposable  petrl  nets. 

C.  CLOSED  PETRI  NET  SISTEMS 

To  express  tne  system  state  transitions  as  a  Markov 
process  It  Is  first  necessary  to  derive  expressions  for  the 
arrival  and  departure  processes  for  tne  places  in  the  net. 
This  may  be  accomplished  by  considering  the  net  as  a 
collection  of  nodes,  each  of  which  has  a  well-defined 
benavlor,  and  In  particular,  for  wnlcn  tne  arrival  and 
departure  processes  may  be  expressed  analytically. 
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k  node  In  a  petrl  net  Is  defined  as: 

Definition  3.11  i  node  a  in  a  petrl  net  Is  a  subset  of  the 
set  {PljT}  sucn  tnat 
Vt£  €  T  €  o  <=■> 

Vpj  Pj€*tj  <=«>  pj  €n 

AVt„  <”>  t„€n 

Theorem  3.2  Tne  node  set  [nj  =  n,  ♦  n^f.tn^  Is  a 
partitioning  of  a  petrl  net  M. 

Proof.  1.)  yn^  «iP(jT}.  By  definition,  every  transition  t 
is  trivially  an  element  of  some  node  n,^.  Assume  there 
exists  a  place  pJ  such  that  pj^(n,  ,  n^, ..,,n^).  By  the 
definition  of  a  petrl  net,  pj  has  (at  least)  one  input 

transition  t^  .  Since  t^  is  an  element  of  some  node,  by 

Definition  3.11  pj  is  an  element  of  that  node. 

11.)  Vn.  ,nfc  ^  [nJ  n*  *  V  H  “b  Assume  there 

exists  some  transition  t£€in*nnfc>.  Let  pj  be  an  Input 
place  to  and  an  element  of  n^.  Then  by  Definition 

3.11  py  Is  also  an  element  of  n^.  Now  let  t^  be  an 
output  transition  to  py  and  an  element  of  n«.  Aeain  by 
definition  t|^  Is  also  an  element  of  n^  and  therefore 
n^  *  a^. 

Likewise,  assume  there  exists  some  place 

Py  By  the  same  reasonlne  n«.  >  o^.  Therefore, 

the  set  of  nodes  defines  a  partitioning  of  M.  QED. 
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Figure  3.2(a)  snovs  tae  node  partitioning  of  an 
arbitrary  petrl  net.  New  consider  the  single 
place/transl tlon  node  n,.  Figure  3.2(b)  Is  this  node  with  an 
arbitrary  marKlng.  Since  we  have  assumed  that  the  transition 
In  tnls  node  Is  firing  whenever  enabled,  we  nave  the 
Important  result  that  this  node  is  equivalent  to  a  single 
server  queueing  system. 

The  marking  for  p.  which  we  have  defined  as  tne  state 
element  u.  Includes  the  tokens  being  fired  or  waiting  to 
fire.  Two  features  of  tnls  representation  should  be  noted. 
First,  all  tokens  are  identical;  no  token  classes  exist. 
Second,  no  qneuelng  discipline  Is  modeled  In  the  system. 
This  places  a  restriction  on  the  ability  to  derive  analytic 
solutions  for  the  system. 

To  describe  the  operation  of  tne  node,  that  Is, 
determine  the  local  state  probabilities  PUK'D  =  uj ,  it  Is 
necessary  to  cnaracterize  tne  arrival  and  departure 
processes.  It  Is  well  known  that  the  exponential 
distribution  Is  tne  only  continuous  distribution  for  which 
the  Markov  property  holds.  In  addition.  It  has  been  shown 
[33]  that  arbitrary  work  conserving  queueing  disciplines 
result  in  equilibrium  product  form  state  probability 
solutions  for  exponential  firings.  Therefore  we  assume  the 
firing  time  distribution  S(z)  to  be: 
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Definition  3.12  Tiie  firing  time  distribution  for 


transition  t^  is  given  toy 

Si  (x)  *  1  -  exp(-fj^) 

vnere  tne  mean  firing  rate  isjJLj;. 

Tbe  requirement  tnat  tne  queueing  discipline  be  voric 
conserving  means  tnat  no  xnovledge  of  tne  firing  time 
requirements  is  used  in  selecting  toxens  for  firing.  It  is 
clear  from  tne  indeterminate  nature  of  tbe  tokens  in  petrl 
nets  that  this  is  Indeed  tbe  case  and  therefore  we  are 
Justified  in  asserting  that  tbe  Markov  property  bolds. 

Finally*  it  is  necessary  to  determine  tne  arrival 
process  for  tbe  node.  In  tne  case  of  closed  networks  (and 
tbe  petrl  nets  we  bave  considered  thus  far),  tbe  arrivals 
are  made  up  of  departures  from  other  nodes  in  tne  net.  It  is 
assumed  that  upon  completion  of  firing,  tbe  tokens 
immediately  enter  tnelr  associated  output  places.  Therefore, 
the  arrival  process  may  be  characterized  as: 


Definition  3.13  Tne  arrival  rate 
given  by: 


A- -2  r- 

j«i  J 


for  a  place  p^ 


where  Py  is  tbe  arrival  rate  for  node  n j ,  bji  is 
branching  probability  that  a  departure  from  node 
arrives  at  node  ny,  and  m  is  the  rank  of  [n] . 


is 


tbe 
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Note  tnat  we  nave  not  specified  tne  arrival  dlstrloutlon 
Itself.  It  Has  been  snown  by  Burice's  tbeorein  [42J  and 
several  extensions  (for  example  [3J  ) ,  tnat  In  many  cases  tne 
arrival  process  is  asymptotically  Poisson. 

To  summarize  V  we  nave  made  tne  following  assumptions 
concernlnr  the  petrl  net  state  transition  process: 

1.  firing  times  are  Independent. 

2.  Flrlne  times  are  continuous  and  exponentially 

distributed. 

3.  The  queueinff  discipline  is  worx  conserving. 

4.  Noadetermlnlstlc  transitions  between  nodes  are 

determined  by  constant  branchlne  probabilities. 

5.  There  Is  no  overhead  In  transition  firings; 
transitions  fire  whenever  enabled. 

In  Section  II  we  considered  the  class  of  state  machine 
decomposable  nets  and  state  machines,  figure  3.3  is  an 
example  of  such  a  net  with  Its  associated  nodes. 

Theorem  3.3  Each  node  In  a  state  machine  contains  exactly 
one  place. 

Proof.  By  definition*  each  transition  has  a  single  input 
place.  Trivially  then*  there  must  be  at  least  one  place 
In  each  node,  without  loss  of  generality*  assume  there 
exists  a  node  with  two  places  p,  and  with  t^'  ^  p^*  .  By 
Implication*  t^  ^  Pj^»  and  therefore  P^Ji^^tj;  In 
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contradiction  wltn  tne  definition  of  a  node.  Tnerefore, 


tbere  is  at  most  one  place  in  eacd  node.  QED. 

Tae  next  result  follows  immediately: 

Corollary  3.3.1  Tbe  places  In  a  state  machine  are 
free-choice . 


Since  the  places  are  free-choice,  it  Is  possible  to 
assign  the  branching  probabilities  to  the  output 
transitions.  These  transitions  are  not  multiple  servers, 
rather,  they  represent  the  possibility  for  toJcens  which  must 
be  handled  differently.  It  is  necessary  therefore,  to  create 
composite  places  to  deal  with  this  requirement.  The 
resulting  net  we  call  the  stochastic  equivalent  petrl  net 
(SBN). 


Definition  3.14  The  stochastic  equivalent  net  for  a  petrl 
net  M  is  constructed  as  follows: 
for  every  place  p  in  P,  assign  a  set  tTT, 
where  n  *  |Pi*j  ,  VIrCT  I(7rj,tn)  =  Kp^.tj),  and  if 
Pi*  •  (t,,ta,...,tj 


O('Trjftf^) 


0(Pi, .  J-lc 
0  otherwise 


la  the  associated  graph,  each  edge  from  a  transition  In  «p( 
to  the  set  {%  fTT^, . . .  }  Is  Joined  by  an  arc  and  labeled 
with  toe  appropriate  branching  probability. 
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Tbe  SBM  for  t&e  petri  net  In  Figure  3.3  Is  depicted  In 
Figure  3.4.  Eacn  node  In  toe  SSN  consists  of  a  single  place 
and  transition,  with  the  branching  probabilities  occurring 
at  the  output  from  the  transitions.  It  Is  clear  from  the 
definition  that  the  SEN  has  the  same  properties  of 
boundedness,  llreness,  and  consistency  as  the  associated 
petri  net. 

It  Is  now  possible  to  obtain  the  analytic  solution  for 
the  petri  net  by  treating  is  as  a  closed  queueing  network. 

Theorem  3.4  The  SEN  for  a  state  machine  with  a  live 
marhlng  Is  ergodlc. 

Proof.  By  theorem  2.12,  a  state  machine  Is  bounded  and 
therefore  tne  state  space  (reachability  set)  Is  finite. 
Lien  has  shown  [43,  thm  llj  that  the  state  space  for 
this  class  is  strongly  connected.  Therefore,  tne  state 
space  Is  Irreducible.  since  It  Is  finite,  tne 
probability  of  reaching  some  state,  PLO4J,  Is  greater 
tnan  zero.  Therefore  toe  state  space  Is  recurrent  and 
noa'null.  By  definition  therefore,  the  state  space  is 
ergodlc  and  likewise  the  SSN  Is  ergodlc. 

Thus,  equilibrium  state  probabilities  exist  for  toe  system? 
that  is, 

P[OJ  -  llm  P[U,rJ 
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This  tjpe  of  system  was  solved  t>y  aordon  and  Newell  [30J  .  At 
equlll tne  derivative  d/dT(P[U,Tj)  must  vanisn  for 
each  state  in  tne  state  space.  Tnis  allows  tne  rlobal 
balance  equations  for  tne  system  to  be  written.  For  some 
state  ,  tne  rate  of  cnanee  of  probability  is  determined  by 
the  rate  of  flow  of  probability  into  the  state  due  to 
arrivals  and  the  rate  of  flow  of  probability  from  tne  state 
due  to  departures.  This  may  be  written  as: 

d/dT  (P[a,T)J  »  Pr(u,  ,u<j,...  ,u^J  )  " 

Z  Z  5<u;  )/i,btj -PKn,  .Uj . Uj-1 . U-+1 . u„)l 

«  0 

where  Is  unit  step  function  elven  by 

0  if  Ui  *  0 
1  otherwise 

■ 

These  equations  may  be  solved  directly  to  within  a  constant 
which  may  be  determined  by  addlne  the  requirement  that 

Z  p[oj  »  1 

The  product  form  solution  to  these  equations  is  [30] 

P[0I  ■  P[(u  ,  ,Uji, . . .  ,u^ )  J  *  {l/G(K)  >  i-*^’ 

4>l 

Where  K  »  N(U)  and  the  are  solutions  to  equations 
^  *^jt  ^  1*1  f2f ...  »n) . 

The  normalization  constant  6(t)  is  given  by 
G(S)  -  Z  fl  X? 

U  c«t 

Algorithms  have  been  found  for  computing  G(E)  and  the  z; 
[42J. 
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D.  OPEN  PETRI  NET  SYSTEMS 

Since  tne  SEN  for  a  state  macnine  nas  been  snown  to  be 
equivalent  to  closed  netvorcs  of  queues,  toe  question  arises 
as  to  woetoer  petrl  nets  can  be  defined  wolco  are  analogous 
to  open  networks.  Sucn  a  system  may  model  tne  occurrence  of 
external  events  such  as  tne  arrival  of  Interrupts. 
Alternatively,  tne  model  may  represent  a  communications 
system  where  messages  enter  and  are  removed  from  tne  system 
at  various  points.  To  Incorporate  tnese  external  events. 
Definition  2.1  may  be  extended  as  follows: 

Definition  3.15  An  open  mariced  petrl  net  OM  Is  a  marked 

petrl  net  where 

T  a  source 

tj*  =0  <->  t^'  is  a  sink 

It  Is  assumed  that  tnese  transitions  may  source  or  sink  an 
Infinite  number  of  tokens.  The  firing  rates  are  defined 
as  before  except  that  y'i  -jXi  Is  the  mean  arrival  rate  for 
‘iource  . 

The  possibility  of  external  arrivals  requires  a 
modification  of  tne  earlier  arrival  process  definition. 

Definition  3.16  The  arrival  rate  P*  for  a  node  Is  elven  by 

r.  -y.-2  Tj 

It  can  be  seen  that  Definition  3.13  is  a  special  case 
wnere  '^^■6  for  1  ■  1,2,. ..,n. 


82 


Several  observations  can  be  made  concerning  tne  ways  In 
wnicn  the  properties  of  llveness,  boundedness,  and 
consistency  are  affected  by  tne  addition  of  sources  and 
slnKs.  First,  consider  tne  case  of  marJted  graphs.  Recall 
that  for  a  marted  rraph,  each  place  Is  conflict  free.  Figure 
3.5(a)  shows  part  of  a  marked  graph.  To  meet  the  conflict 
free  requirement,  source  and  sink  transitions  can  be  added 
to  the  net  only  at  existing  transitions  (with  Intervening 
places  being  added).  In  Figure  3.5(b),  a  source  transition 
stl  has  been  aided  at  transition  t^  and  In  Fleure  3.5(c),  a 
sink  transition  st2  has  been  added  at  transition  t^. 

Theorem  3,5  Llveness  In  marked  grapns  Is  unaffected  by  tne 
addition  of  source  or  sink  transitions. 

Proof.  By  definition,  a  source  transition  Is  live,  and 
therefore  llveness  Is  unaffected  by  the  addition  of  a 
source.  Now  consider  a  transition  In  tne  net  t^  with  a 
sink  transition/place  pair  added  to  the  output.  If  t^  Is 
live.  It  can  be  fired  by  some  sequence  which  will  then 
enable  the  sink  transition;  therefore,  tne  sink 
transition  is  live  and  llveness  Is  conserved. 

Tneorem  3.6  A  marked  grapn  remains  bounded  after  addition 
of  source  and  sink  transitions  except  In  the  places 
associated  with  those  transitions. 
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Figure  3.5  idiltlon  of  source  and  sink  transitions  to  petrl  nets, 
(a)  marked  erapn.  (b)  marked  grapn  wltn  source  stl.  (c)  marced 
grapn  wltk  sink  st2.  (d)  state  macnlne  net  wltn  sources  and  sines 
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Tbis  result  is  clearly  true  by  tbe  definition  of  transition 
firinir.  It  snoull  be  noted  tnat  tbe  general  results  of 
queueinr  theory  require  tbat  tbe  places  associated  with  tbe 
source  and  sink  transitions  be  unbounded  (if  exponential 
arrlTals  and  departures  are  assumed). 

In  terms  of  tbe  dynamic  operation  of  marked  erapbs,  it 
can  be  seen  from  Figure  3.5  that  tbe  existence  of  sink 
transitions  has  no  effect.  Tbe  source  transitions  operate  by 
controlling  tne  enabling  of  the  net  transitions  to  which 
they  are  connected;  tney  set  an  upper  bound  on  tne  firing 
rate  of  tbe  transition. 

In  tne  case  of  state  machines,  tne  source  and  sink 
transitions  are  added  to  existing  places  in  tbe  net  (see 
Figure  3.5(d)).  Tne  nondetermlnlstlc  nature  of  state 
machines  results  in  changes  to  tbe  properties  of  the  net 
<ifter  tne  ddditlon  of  tne  sources  and  sinks.  For  example,  if 
a  sink  Transition  is  aided  to  a  live  state  machine,  the  net 
ccuiri  CTentuaiiy  terminate  since  tbe  sink  must  eventually 
become  enat  itl  resulting  in  tne  loss  of  a  token  to  tne 
system,  d^-en  sources  are  added,  the  net  will  become  become 
uncouaded.  Since  tne  source  can  be  fired  arbitrarily  often, 
tbe  token  count  of  tne  output  place  to  tbe  source  can  become 
arbit  art  if  large  . 

By  generalizing  tbe  closed  network  queueing  model 
developed  in  tne  previous  section,  tne  solution  for  state 
machines  with  sources  and  sinks  may  be  obtained.  Once  again. 
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tbe  net  is  transformed  into  Its  stocnastlc  equivalent,  k 
sink  Is  added  to  a  node  J  by  adjusting  tne  branching 
probabilities  of  the  transitions  In  J  so  that  the 
probability  of  departure  from  the  system  at  node  J,  P[d  J, 
obeys: 

P[dJ  ■  1  -  ^  bj^*  where  n  Is  Ui*!. 

A  source  Is  added  to  node  J  by  Inserting  an  edee  directed 
Into  the  place  In  J  and  labeled  with  the  mean  arrival  rate. 

Since  it  Is  possible  for  the  net  to  become  unbounded 
after  adding  sources  and  sinks,  it  Is  necessary  to  require 
that  Tj'  <  fJij  for  every  node  In  the  SEN  to  ensure  that  the 
net  remains  ergodlc. 

Once  acaln,  the  solution  involves  writing  the  global 
balance  equations  for  the  system,  l.e.: 

VPj  ^  (rate  of  flow  from  Into  Uj  ) 

=  P[tJy]  (rate  of  flow  out  of  Uj  ) 

Basket  [32j  has  shown  that  the  general  product  form  solution 
for  this  system  Is  of  the  form 

P(a]  »  Cd(0)f,  (u,)fj,(u3)...f„(u„) 

where  C  Is  the  normalization  constant  needed  to  ensure 

2;  -  1  . 

d((J)  is  an  expression  for  the  exogenous  arrival 

rate, 

n 

d(n)  Poisson  arrivals  at  constant  rate'y^*, 
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and  ft(uL)  Is  a  function  of  tne  queue  discipline. 

For  FCFS,  ,fi(ui)  =  l/u,-  fir  ’UY 

'  \P-.7 

g.  CONSISTENT  PETHI  NET  SISTBMS 

Tne  Host  general  petrl  net  class  we  consider  Is  tnat  of 
lire,  bounded,  and  consistent  nets.  Tne  solution  to  tnis 
class  proceeds  identically  to  tnat  used  earlier.  Tne  net  Is 
first  transformed  Into  its  stocnastic  equivalent  net  form  by 
tne  metnod  of  Definition  3.13.  Figure  3.6(a)  snows  bow  an 
arbitrary  node  in  tne  petri  net  is  transformed.  Note  tnat  in 
the  resulting  node  12,  two  places  are  required  as  input  to 
transition  14  and  tnerefore  tnis  node  does  not  model  tne 
simple  queue/server  pair  wnicn  was  seen  earlier  for  state 
maenlnes.  Another  possibility  for  a  SEN  node  is  tnat  tne 
transition  nas  multiple  outputs  with  branching  probabilities 
b^j  all  equal  to  1.  These  two  situations  are  shown  In  Figure 

3.6(b).  It  has  been  shown  I44j  tnat  these  types  of  nodes 
(also  referred  to  as  Join  and  forn  nodes)  do  not  satisfy 
local  balance  and  tnerefore  product  form  solutions  do  not 
exist  for  tnis  class  of  nets.  However,  since  the  net  is 
bounded,  by  tne  results  of  Chapter  II  tne  reachability  set 
(and  state  space)  is  finite  and  tnerefore  the  global  state 
equations  can  be  solved  numerically  [45J . 

In  the  case  of  consistent  nets  with  sources  and  slnics, 
it  is  possible  for  the  net  to  become  unbounded  since  the 
sources  may  fire  arbitrarily  often  and  therefore  finding  the 
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solution  to  tne  global  balance  equations  becomes 
Intractable.  In  tnis  case*  approximation  tecnnlques  sucn  as 
aggregation  or  tne  diffusion  approximation  l46]  must  be 
resorted  to.  Tne  appllcabllitj  of  tnese  tecnnlques  to  petrl 
nets  Is  an  open  question,  but  one  wblcn  nas  the  potential  to 
extend  the  nodellng  power  of  petrl  nets  to  more  Interesting 
systems. 
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IV.  CONCLUSIONS 


Tttls  laesis  aas  addressed  tne  probiem  of  computer  system 
performance  analysis  tnrougn  the  use  of  the  petrl  net  model. 
Tne  model  nas  wide  applicability  to  tne  analysis  of  both 
hardware  and  software  systems*  particularly  those  which 
exhibit  concurrency  or  asynchronous  operation.  Due  to  tne 
power  of  the  petrl  net  approach*  it  is  necessary  to  restrict 
the  structure  of  the  nets  resultlnir  In  a  nierarchlcal  class 
relationship  between  petrl  net  types. 

The  classes  of  greatest  Interest  In  system  modeling  are 
marked  graphs*  state  macnlnes*  and  consistent  nets.  All 
three  of  these  classes  were  shown  to  have  the  properties  of 
boundedness*  liveness*  and  consistency  which  are  useful  In 
the  verification  of  computer  system  correctness.  Of  tne 
three  classes*  the  class  of  consistent  nets  is  the  most 
useful  In  modeling  In  that  It  can  represent  the  greatest 
ranee  of  possible  systems  —  and  Is  also  the  most  difficult 
to  analyze  mathematically. 

It  was  seen  that  tne  eeneral  problem  of  reachability* 
and  the  set  of  states  In  which  a  marked  petrl  net  could 
enter*  was  a  primary  consideration  in  the  analysis  of  tne 
nets.  In  particular,  an  algorithm  was  presented  for 
determining  tie  state  space  for  tne  class  of  bounded  petrl 
nets. 
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By  defining  the  firing  times  for  tne  transitions  in  tne 
net*  it  was  possible  to  extend  tne  analysis  of  petri  nets  to 
their  dynamic  execution.  Bandom  firing  times  allowed  tne 
nets  to  model  lata  dependent  events.  This  concept  led  to  the 
identification  of  nondetermlnism  in  the  petri  net  execution. 

Petri  nets  with  random  firing  times  were  shown  to  be 
analogous  to  closed  queueing  networxs.  A  major  difficulty  In 
this  approach  is  the  inability  to  model  queueing  disciplines 
in  the  places.  However,  if  exponential  firing  is  assumed, 
the  analysis  can  be  conducted  without  detailed  knowledge  of 
the  structure  of  the  queue.  In  this  context,  the  stochastic 
equivalent  net  was  introduced  as  a  method  for  demonstrating 
the  correspondence  between  petri  nets  and  queueing  networks. 
This  permitted  tne  state  probabilities  to  be  determined 
through  the  known  techniques  of  queueing  theory. 

The  definition  of  petri  nets  was  extended  to  allow  for 
events  which  take  place  external  to  tne  system  itself. 
Again,  the  resulting  stochastic  equivalent  net  corresponds 
to  a  queueing  network  —  in  this  case  tne  open  network 
model . 

It  appears  that  this  approach  to  petri  net  modeling  can 
utilize  more  of  the  recent  results  of  queueing  network 
theory.  lor  example,  solutions  nave  been  found  for  state 
dependent  routing  (branching)  probabilities,  and  state 
dependent  arrival  and  departure  rates.  Additional  work  is 
required  to  determine  if  tne  use  of  petri  net  based 


stochastic  molds  simplifies  the  problem  of  reducing  system 
deslxn  criteria  and  parameters  to  a  form  wnlcn  permits  tne 
application  of  queueing  network  techniques. 
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LIST  OP  NOTATION 

probability  that  transition  J  will  fire  eiven 
tnat  place  i  enables  transitions  t ^  ^ 

input  Incidence  matrix  for  a  petri  net 
output  incidence  matrix  for  a  petri  net 
the  set  of  ed<?es  in  a  marked  eraph  between 
transitions  i  and  J 

a  current  assignment  for  a  transition  in  a 
consistent  net 

the  firing  function  for  a  transition  t  and 
state  0  in  a  petri  net 
the  total  mean  arrival  rate  at  node  1 
the  input  function  for  place  p  and  transition  t 
a  marked  petri  net  <P,T,I,0,jU> 
a  marked  graph  <T'’,E',jur> 
the  marking  function  for  a  marked  petri  net 
(section  2} 

the  mean  firing  rate  for  transition  1  (sec  3) 

a  petri  net  <P,T,I,0> 

the  token  count  for  a  set  of  places  P 

the  output  function  for  place  p  and  transition  t 

the  set  of  places  in  a  petri  net 

a  composite  place  in  a  stochastic  equivalent  net 
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Q-  b 


Q(M)  ttie  reacaablllty  set  (space  state)  for 

petn  net  M 

R(f)  tne  reacnabillty  set  for  a  vector  addition 

system  7 

ttie  computation  rate  for  a  discrete  time  peirl  net 
a  flrins  sequence  ( t,  « t^t  •  *  •  tt^ ) 
tae  enabling  set  i  t,  ,  tj^, . . » ,  enabled  by 

marking  fJ.^ 

Six)  tbe  transition  firing  time  distribution 

s(x)  tne  transition  firing  time  density  fuctlon 

T  tbe  set  of  transitions  in  a  petri  net 

Ut  tne  state  of  a  petri  net  (u,  ,Ujj, . . .  ,u^)  wltn 

marking  fj,^ 

?  a  vector  addition  system  <dtV> 

W  the  vector  set  in  a  vector  addition  system 
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